[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16889344#comment-16889344
]
ASF subversion and git services commented on SOLR-13534:
Commit
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16889315#comment-16889315
]
ASF subversion and git services commented on SOLR-13534:
Commit
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16886594#comment-16886594
]
ASF subversion and git services commented on SOLR-13534:
Commit
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16886481#comment-16886481
]
ASF subversion and git services commented on SOLR-13534:
Commit
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16886476#comment-16886476
]
ASF subversion and git services commented on SOLR-13534:
Commit
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16885771#comment-16885771
]
ASF subversion and git services commented on SOLR-13534:
Commit
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16885769#comment-16885769
]
ASF subversion and git services commented on SOLR-13534:
Commit
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16885718#comment-16885718
]
Noble Paul commented on SOLR-13534:
---
I'll fix it
> Dynamic loading of jars from a url
>
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16868744#comment-16868744
]
Gus Heck commented on SOLR-13534:
-
changing
{code:java}
return getBlobIncRef(keyBuilder.toString(), ()
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16868737#comment-16868737
]
Hoss Man commented on SOLR-13534:
-
created LUCENE-8872 to track the ECJ bug that causes precommit to fail
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16868656#comment-16868656
]
Gus Heck commented on SOLR-13534:
-
This appears to be failing precommit on 8x. When I roll this back it
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16868283#comment-16868283
]
Noble Paul commented on SOLR-13534:
---
bq.Looks good to me; I think security was considered adequately.
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16868231#comment-16868231
]
David Smiley commented on SOLR-13534:
-
Any reason this isn't marked Resolved yet?
> Dynamic loading
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16868228#comment-16868228
]
David Smiley commented on SOLR-13534:
-
Looks good to me; I think security was considered adequately.
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16865381#comment-16865381
]
ASF subversion and git services commented on SOLR-13534:
Commit
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16865382#comment-16865382
]
ASF subversion and git services commented on SOLR-13534:
Commit
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16865380#comment-16865380
]
ASF subversion and git services commented on SOLR-13534:
Commit
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16865375#comment-16865375
]
ASF subversion and git services commented on SOLR-13534:
Commit
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16865374#comment-16865374
]
ASF subversion and git services commented on SOLR-13534:
Commit
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16865373#comment-16865373
]
ASF subversion and git services commented on SOLR-13534:
Commit
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16865372#comment-16865372
]
ASF subversion and git services commented on SOLR-13534:
Commit
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16865365#comment-16865365
]
ASF subversion and git services commented on SOLR-13534:
Commit
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16865361#comment-16865361
]
ASF subversion and git services commented on SOLR-13534:
Commit
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16861850#comment-16861850
]
ASF subversion and git services commented on SOLR-13534:
Commit
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16861657#comment-16861657
]
Noble Paul commented on SOLR-13534:
---
bq.Imagine multi tenancy.
I would strongly recommend against
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16861654#comment-16861654
]
ASF subversion and git services commented on SOLR-13534:
Commit
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16861596#comment-16861596
]
Jan Høydahl commented on SOLR-13534:
I agree that we need more checks around this. There has also
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16861576#comment-16861576
]
Noble Paul commented on SOLR-13534:
---
bq. E.g. if the target file is a 200Gb video...
good one.
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16861574#comment-16861574
]
Alexandre Rafalovitch commented on SOLR-13534:
--
Well, all the security worries are based on
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16861567#comment-16861567
]
Noble Paul commented on SOLR-13534:
---
bq.but it still opens up an attack vector of whatever downloads
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16861562#comment-16861562
]
Noble Paul commented on SOLR-13534:
---
The runtime lib is disabled by default. [~gus_heck] I'm not sure
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16861563#comment-16861563
]
Alexandre Rafalovitch commented on SOLR-13534:
--
I feel sha512 is good for verification, but
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16861492#comment-16861492
]
Gus Heck commented on SOLR-13534:
-
If I understand the doc edits I see in the PR, it looks like this is
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16861469#comment-16861469
]
Tomás Fernández Löbbe commented on SOLR-13534:
--
I feel we've had CVEs for much less than
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16861426#comment-16861426
]
ASF subversion and git services commented on SOLR-13534:
Commit
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16861404#comment-16861404
]
ASF subversion and git services commented on SOLR-13534:
Commit
[
https://issues.apache.org/jira/browse/SOLR-13534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16861394#comment-16861394
]
ASF subversion and git services commented on SOLR-13534:
Commit
37 matches
Mail list logo
